Tales from the Dark Side: Episode 5 – The Tale of a Panda Who Makes Clouds Cry

In the final episode of this season’s, Tales from the Dark Side, we will discuss another old acquaintance: Evasive Panda, an Advanced Persistent Threat (APT) group identified in 2012, which in recent times has turned its attention to cloud services, employing new modules within their cheeky bit of malware known as MGBot.

Leveraging on spear-phishing and supply chain attacks, Evasive Panda deploys the latest version of MGBot to pinch web cookies and artfully bypass the defenses of multi-factor authentication (MFA) gaining direct access to cloud environments without ever troubling for credentials.

Don’t miss this opportunity to dive into a wider discussion about Cloud Cybersecurity, shinning a light on how controls perform against such targeted attacks, and outlining a few choice tactics for detection and mitigation, to help ensure that your cloud environment remains unwelcoming to digital interlopers.